一种基于子网关联的事件关联机制  

AN EVENT CORRELATION SCHEME BASED ON SUB-NETWORK CORRELATION

作　　者：张劲[1] 李增智[1] 

机构地区：[1]西安交通大学计算机系统与网络研究所,西安710049

出　　处：《计算机研究与发展》2002年第3期280-285,共6页Journal of Computer Research and Development

基　　金：国家"八六三"高技术研究发展计划基金 (863 -5 11-9460 0 8);陕西省自然科学基金 (99X18)资助

摘　　要：故障在网络运行中是不可避免的 ,一旦故障产生 ,会在网络中进行传播 ,产生大量的告警事件 ,如何能够快速有效地从这些告警事件中准确进行事件关联 ,从而给故障定位是网络管理的关键任务 .在研究故障的传播机制基础上提出了一种基于子网的事件关联机制 ,把事件的关联范围限定在事件发出者所在的子网中 .同时 ,还提出了自己的事件操作模型 ,分为预处理操作、基本操作和位置操作 .最后提出了实现该机制的算法 ,测试了该算法的效率 。Fault is inevitable in networks. When a fault happens, it will propagate through network and cause a large number of alarm event. How to correlate among events to identify the fault exactly and fast is the key task of network management. After studying the fault propagation mechanism in network, an event correlation scheme based on sub network correlation is proposed, limiting the correlation range only in the sub network where the event generator is. The event operation model is also proposed, which is divided into pre procession operation, basic operation, and location operation. Finally, the scheme is implemented and tested with performance analysis.

关 键 词：事画关联 组合事件 位置操作 子网关联 网络运行 计算机网络 

分 类 号：TP393.06[自动化与计算机技术—计算机应用技术]